Security MCP servers

3,384 servers

Scan code and dependencies, look up vulnerabilities and work with security tools.

Filter and sort these servers

Start from the first servers

Namecheap Api io.github.lanternrow/namecheap-api-mcp

Namecheap API — domains, DNS, contacts, registrar lock, SSL listing, and pricing.

Version check not run yet

DevOps and infrastructure Official MCP Registry · npm Local 29 a week MIT
Base Security Scanner io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

Version check not run yet

Security Official MCP Registry · npm Local 29 a week MIT
upkeep-mcp io.github.tiagocalado86/upkeep-mcp

Website maintenance checks: domains, SSL, uptime, technical SEO and accessibility

Version check not run yet

Developer tools Official MCP Registry · npm Local 29 a week MIT
aip-mcp-server io.github.the-nexus-guard/aip-mcp-server

MCP server for AI agent identity verification via AIP

Version check not run yet

Security PyPI Local MIT
awslabs.cdk-mcp-server io.github.awslabs/mcp-changelog.md-vq61p2

An AWS CDK MCP server that provides guidance on AWS Cloud Development Kit best practices, infrastructure as code patterns, and security compliance with CDK Nag. This server offers tools to validate in

Version check not run yet

DevOps and infrastructure PyPI Local APACHE-2.0
correctover-ccs-mcp io.github.dshcorrectover/ccs-conformance-vectors

Correctover CCS MCP Server — local-first MCP/Agent security tooling: receipt verification, batch audit, field-level tamper localization, and 14-rule MCP config checkup. Zero network egress, zero third

Version check not run yet

Search and retrieval (RAG) PyPI Local LICENSEREF-ELASTIC-2.0
ghidramcp io.github.lauriewired/ghidramcp

Model Context Protocol server for Ghidra reverse engineering

Version check not run yet

Security PyPI Local APACHE-2.0
Solana Security Standard io.github.Copenhagen0x/solana-security-mcp

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

Version check not run yet

Security Official MCP Registry · npm Local 28 a week MIT
Bouncer Gates io.github.ajeermahmood/bouncer-gates

Stops secrets, cross-tenant queries and unsafe migrations before they merge.

Version check not run yet

Security Official MCP Registry · npm Local 28 a week MIT
Dingdawg Data Agent io.github.dingdawg/dingdawg-data-agent

AI data agent — schema analysis, query optimization, PII detection, pipelines.

Version check not run yet

DevOps and infrastructure Official MCP Registry · npm Local 28 a week BUSL-1.1
Statping io.github.mrfentmen/statping-mcp

Service rollup, ports, DNS propagation and TLS chains - no API key.

Version check not run yet

DevOps and infrastructure Official MCP Registry · npm Local 28 a week MIT
PromptGuard co.promptguard/security

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

Version check not run yet

Model and agent tools Official MCP Registry · npm · PyPI Local 27 a week MIT
Lucairn io.github.Declade/lucairn-mcp-server

Pseudonymizes PII before your LLM and returns a cryptographically signed receipt per response.

Version check not run yet

Security Official MCP Registry · npm Local 27 a week MIT
Ipqualityscore io.github.pipeworx-io/ipqualityscore

IPQualityScore MCP — wraps the IPQualityScore fraud-prevention API

100% up · 30 days

Security Official MCP Registry · npm Remote 27 a week MIT
Envcp io.github.fentz26/envcp

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

Version check not run yet

Security Official MCP Registry Local
mcpward io.github.tsvetang2/mcpward

Black-box security & contract testing for MCP servers — rug-pull, tool-poisoning, schema-drift & protocol checks for CI (JUnit + SARIF).

Version check not run yet

Developer tools npm Local 58 a week APACHE-2.0
Balmas com.balmasai/balmas-mcp

Agents read cleaned copies of your files: PII replaced with local consistent tokens. Read-only.

Version check not run yet

Files and storage Official MCP Registry · npm Local 26 a week MIT
Scannd com.scannd/scannd

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

Version check not run yet

Security Official MCP Registry · npm Local 26 a week MIT
WhiteIntel — Ownership Intelligence dev.whiteintel/whiteintel

UBO, sanctions & ownership graph. 23 tools, 130.7M entities, 31 registries.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 26 a week MIT
Osint Agent Skills io.github.frangelbarrera/osint-agent-skills

OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto. Works with Claude Code.

Version check not run yet

Security Official MCP Registry · npm Local 26 a week MIT
Januscope io.github.giancarloerra/januscope

Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.

Version check not run yet

Databases Official MCP Registry · npm Local 26 a week AGPL-3.0-ONLY
Airlock RLS io.github.mateuszingano/airlock-rls-mcp

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

Version check not run yet

Databases Official MCP Registry · npm Local 26 a week MIT
Mitre Cwe io.github.pipeworx-io/mitre-cwe

MITRE CWE API MCP.

100% up · 30 days

Security Official MCP Registry · npm Remote 26 a week MIT
cve-cache io.github.weiseer/cve-cache

Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

Version check not run yet

Security Official MCP Registry · npm Local 26 a week APACHE-2.0
dns-cache io.github.weiseer/dns-cache

DNS/WHOIS/SSL/geo-IP cache MCP server for AI agents.

Version check not run yet

DevOps and infrastructure Official MCP Registry · npm Local 26 a week APACHE-2.0
@nxuss/lemma io.github.nxusbets/lemma

Local MCP server that gives coding agents a verifiable project memory, trims what enters their context, and masks secrets — with honest accounting of what it saves and costs.

Version check not run yet

Coding agent tools npm Local 2.6k a week MIT
ShipSafe — Independent security verification co.ship-safe/scanner

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 25 a week SEE-LICENSE-IN
MCPLookup com.mcplookup/mcp

Look up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 25 a week MIT
EverThread io.github.PB-Digital-LLC/everthread

Plain-English website security check for agents: certificate, headers, scripts, forms, spam.

Version check not run yet

Security Official MCP Registry · npm Local 25 a week MIT
vaultguard io.github.ashishrao-4/vaultguard

AI agents use your Obsidian secrets by name — values never reach their context.

Version check not run yet

Security Official MCP Registry · npm Local 25 a week MIT
Aegis Security Skills io.github.drupadsachania/aegis-skills

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 25 a week (APACHE-2.0-OR-MIT)
golive io.github.myanptl/golive-mcp

Check a site before you share it: link previews, SPA refresh 404s, noindex, security headers.

Version check not run yet

Security Official MCP Registry · npm Local 25 a week MIT
eKYC Suite io.github.wefi-ai/ekyc-suite

KYC / eKYC MCP server for face compare, liveness, OCR, and image labeling.

Version check not run yet

Security Official MCP Registry · npm Local 25 a week MIT
Judges Panel io.github.KevinRabun/judges

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

Version check not run yet

Developer tools Official MCP Registry Local
Apimesh io.github.mbeato/apimesh

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

Version check not run yet

Security Official MCP Registry · npm Local 28 a week MIT
Sota io.sota/mcp

EU-native PaaS for AI agents — deploy web apps with one sentence, managed Postgres, GDPR by default.

100% up · 30 days

Databases Official MCP Registry · npm Local Remote 24 a week MIT
Codesafer io.github.goldmembrane/codesafer

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

Version check not run yet

Security Official MCP Registry · npm Local 41 a week ISC
Nordic Data io.github.Mnymann/nordic-data

Company, KYB, VAT, sanctions, LEI and address data for 15 EU countries.

100% up · 30 days

Security Official MCP Registry · npm Local Remote 23 a week MIT
Penthera io.github.danoszz/penthera

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Version check not run yet

Developer tools Official MCP Registry · npm Local 23 a week MIT
Shodan Internetdb io.github.pipeworx-io/shodan-internetdb

Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)

100% up · 30 days

Security Official MCP Registry · npm Remote 23 a week MIT
Sophos Central io.github.rijul170/sophos-central-mcp

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

Version check not run yet

Security Official MCP Registry · npm Local 23 a week MIT
@shivdev/agent-warden io.github.shivshankardash/warden

A firewall for AI agents. Detects and blocks prompt injection in email, web pages, documents and MCP tool results before they reach your model.

Version check not run yet

Web search and scraping npm Local 2.4k a week MIT
Trestle com.trestlescan/trestle

Detects leaked secrets (API keys, tokens, private keys) in source code.

Version check not run yet

Developer tools Official MCP Registry · npm Local 22 a week APACHE-2.0
Ai Supply io.github.ai-supply-store/ai-supply

Search, install, publish & review security-scanned AI capabilities from ai-supply.store.

Version check not run yet

Security Official MCP Registry · npm Local 22 a week MIT
Taskbounty Check io.github.eliottreich/taskbounty-check

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

Version check not run yet

DevOps and infrastructure Official MCP Registry · npm Local 22 a week MIT
Open Sanctions io.github.pipeworx-io/open-sanctions

OpenSanctions MCP — global sanctions and PEP data.

100% up · 30 days

Security Official MCP Registry · npm Remote 22 a week MIT
Security Feeds io.github.pipeworx-io/security-feeds

Security Feeds MCP.

100% up · 30 days

Web search and scraping Official MCP Registry · npm Remote 22 a week MIT
Seon io.github.pipeworx-io/seon

SEON MCP — wraps the SEON fraud / digital-footprint enrichment APIs (seon.io)

100% up · 30 days

Security Official MCP Registry · npm Remote 22 a week MIT